Privacy Policy

Last updated: June 2026

This policy explains how Grupo Pandal Servicios, S.A.P.I. de C.V. (RFC EDU2403151A3), Ciudad de México — operating the Tax Free brand under authorization from YVESAM, and reachable at [email protected] ("we", "us") — handles your personal data when you use our Mexico tourist IVA (VAT) refund service over WhatsApp.

1. What we collect

Only what's needed to prepare and file your refund: your passport (identity and tourist status), your store invoices (CFDI), your boarding pass / departure proof, and the foreign card details required to deposit your refund. We also keep the WhatsApp messages you send us as part of your claim.

2. Why we use it

Your data is used only to: confirm you qualify under Article 31 of the Ley del IVA, prepare and submit your SAT refund claim, communicate with you about it, and deposit your refund. We do not sell, rent or share your data for marketing, and we never charge your card — it is used solely to receive your refund.

3. How we protect it

Your documents are transmitted over encrypted connections and held in private, access-restricted storage available only to the team members preparing your claim.

4. How long we keep it

We keep your data only as long as the tax rules require for your refund claim (Mexican law obliges operators to retain certain fiscal records), and then we delete or anonymize it. You can ask us to delete your data at any time, and we will, except where the law requires us to retain a record of a filed claim.

5. Your rights (ARCO)

Under Mexico's data-protection law you may access, rectify, cancel or oppose the use of your personal data, and withdraw consent. To exercise any of these rights, email [email protected].

6. Third parties

We share data only with the SAT and authorized refund infrastructure as required to process your claim, and with service providers (e.g. secure hosting and messaging) bound to protect it. WhatsApp messaging is provided by Meta under its own terms.

7. Changes

We may update this policy; the "last updated" date above reflects the current version.